Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: U2u8zEfc73JSdNwrC2iRybZ+Hoc8jZSxbuytRe7wJFg=
Subject key identifier: EB:68:8B:57:84:84:A1:68:54:3D:46:BD:90:74:92:44:41:D7:2A:01
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019853441AD9DD7A04BA4A0E9B24833BF7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 08E8
Signing time: Mon 28 Jul 2025 23:00:28 +0000
Manifest this update: Mon 28 Jul 2025 23:00:28 +0000
Manifest next update: Tue 29 Jul 2025 23:00:28 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: duEvwlFI0L4an7hLMgN9Q/GFMq6GtifR5scQEgYaZI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:1a:d9:dd:7a:04:ba:4a:0e:9b:24:83:3b:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Jul 28 23:00:28 2025 GMT
Not After : Jul 29 23:00:28 2025 GMT
Subject: CN=eb688b578484a168543d46bd9074924441d72a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:49:af:4b:45:b7:22:b2:72:a6:cf:ea:64:
fb:9f:27:c9:31:35:26:23:9f:5d:1c:da:27:07:f5:
94:44:e5:fb:61:d6:49:7e:be:49:60:cf:90:db:2d:
31:12:92:16:34:76:9c:53:2b:ec:19:95:30:8e:78:
0a:47:bb:72:d2:12:73:25:5f:94:32:36:fc:d5:aa:
23:15:5d:8e:eb:9b:46:ff:86:64:51:2d:cc:7f:5d:
48:b6:6c:19:22:00:3d:c2:e3:e9:e1:09:da:b0:98:
71:a4:71:63:87:f7:95:d4:19:01:44:30:92:bb:bb:
20:77:16:6d:4e:4e:13:45:9b:f0:2e:99:8f:d6:54:
f7:c9:4b:7b:4d:86:0d:8b:8d:b4:cb:86:4d:fc:f0:
cd:74:5b:e2:4f:93:33:a6:71:fd:2c:aa:75:bc:ba:
ac:75:b6:a4:1a:3d:22:3c:c9:62:8f:4c:76:23:ad:
1f:0a:0b:76:5f:c0:e5:89:b5:c0:36:d6:9d:7f:df:
ac:39:66:56:7f:6c:3f:59:20:15:f2:f1:07:63:1a:
f4:3c:09:4c:95:74:e5:27:64:78:17:cc:c0:07:02:
88:67:00:61:ca:9d:48:e7:c2:eb:eb:65:76:b0:50:
46:91:d6:00:03:e5:d5:57:67:86:79:e0:3d:a1:79:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:8B:57:84:84:A1:68:54:3D:46:BD:90:74:92:44:41:D7:2A:01
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:93:e9:a6:9e:ef:28:6b:9a:f8:77:b1:09:fd:94:b5:ff:c4:
99:26:40:43:25:50:eb:56:4e:cb:6b:c6:90:14:25:7a:66:8b:
f3:b2:96:97:71:b1:2a:95:eb:01:d1:1c:ab:de:31:9e:5c:2e:
98:b2:3c:a5:18:3c:b2:4e:7c:33:f2:25:96:b3:8c:3d:df:3f:
95:cc:eb:e0:c9:33:67:fb:2d:4b:c1:ed:3f:b3:4a:e1:c7:a1:
10:85:65:38:bc:06:6f:e5:e1:37:17:5b:85:6b:93:87:54:2a:
a9:c1:3a:19:f2:f7:16:ce:68:8a:1a:b5:41:83:7f:7c:ed:24:
ca:3e:44:aa:c8:6c:f9:13:df:7b:d3:da:3c:d9:83:e5:30:be:
cc:78:69:c1:24:22:01:8b:bd:1a:fc:03:af:89:0d:88:e2:66:
21:03:65:c8:69:f4:7b:8a:af:ad:dd:41:d4:ce:ed:24:c6:53:
df:b8:6c:11:06:bb:03:70:11:d2:7f:7a:2e:ca:23:1c:1a:8c:
21:6f:20:96:cf:db:52:1f:ec:19:68:d8:79:46:b3:bf:4d:d8:
dc:bd:de:db:c1:81:e7:5e:d6:a7:f6:01:9c:96:c0:c5:9d:fd:
20:ae:b8:3f:b0:fb:e0:59:07:81:36:2e:d2:ce:36:21:b4:4c:
5c:d4:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:13:33 2025 by rpki-client